Matthew Mosesohn
ec567bd53c
Update calico to v1.0.2
Also calico-cni to v1.5.6, calico-policy to v0.5.2
Fixes : #1011
7 years ago
Sergii Golovatiuk
aeadaa1184
Set ssl_ca_dirs for rkt based on fact
Since systemd kubelet.service has {{ ssl_ca_dirs }}, fact should be
gathered before writing kubelet.service.
Closes : #1007
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Matthew Mosesohn
2f0f0006e3
Merge pull request #988 from mattymo/feat/rolling3
Add CI cases for testing upgrade from v2.0.1 release
7 years ago
Matthew Mosesohn
de047a2b8c
Merge pull request #983 from vwfs/centos_kernel_upgrade
Add kernel upgrade for CentOS
7 years ago
Antoine Legrand
86a35652bb
Merge pull request #1009 from mattymo/dnsmasq_updates
Enable reset of dnsmasq if manifest or config changes
7 years ago
Matthew Mosesohn
6ae70e03cb
fixup upgrades for canal and weave
7 years ago
Matthew Mosesohn
2c532cb74d
Disable kube_proxy_masquerade_all
Fixes #1012
7 years ago
Matthew Mosesohn
779f20d64e
Merge pull request #1010 from bogdando/fixes
Fix misleading HA docs
7 years ago
Bogdan Dobrelya
89ae9f1f88
Merge pull request #1002 from code0x9/master
use ansible sysctl module for config ip forwarding
7 years ago
Bogdan Dobrelya
ed1ab11001
Fix misleading HA docs
Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
8 years ago
Alexander Block
d2e010cbe1
Add kernel upgrade for CentOS
8 years ago
Matthew Mosesohn
a44a0990f5
Enable reset of dnsmasq if manifest or config changes
7 years ago
Matthew Mosesohn
2f88c9eefe
Merge pull request #989 from holser/kubelet_remedy
Kubernetes Reliability Improvements
7 years ago
Matthew Mosesohn
60f1936a62
Merge pull request #1004 from galthaus/kubelet-load-modules
Allow kubelet to load kernel modules
7 years ago
Matthew Mosesohn
ee15f99dd7
Add CI cases for testing upgrade from v2.0.1 release
These are manual trigger jobs, but should be run if any PR
impacts upgrades.
7 years ago
Matthew Mosesohn
b0ee27ba46
Merge pull request #1006 from mattymo/fix_weave_upgrade
Enable weave upgrade from previous versions
7 years ago
Antoine Legrand
067bbaa473
Merge pull request #1001 from idcrook/kargo-issue-1000-efk-enable
removed explicit role for efk in cluster.yml
7 years ago
Sergii Golovatiuk
c07d60bc90
Kubernetes Reliability Improvements
- Exclude kubelet CPU/RAM (kube-reserved) from cgroup. It decreases a
chance of overcommitment
- Add a possibility to modify Kubelet node-status-update-frequency
- Add a posibility to configure node-monitor-grace-period,
node-monitor-period, pod-eviction-timeout for Kubernetes controller
manager
- Add Kubernetes Relaibility Documentation with recomendations for
various scenarios.
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
7 years ago
Matthew Mosesohn
29fd957352
Enable weave upgrade from previous versions
Raise readiness probe initial time to 60 (was 30)
7 years ago
Matthew Mosesohn
ef10ce04e2
Merge pull request #1005 from rutsky/patch-2
fix kube_apiserver_ip/kube_apiserver_port description
7 years ago
Vladimir Rutsky
f0269b28f4
fix kube_apiserver_ip/kube_apiserver_port description
7 years ago
Matthew Mosesohn
0a7c6eb9dc
Merge pull request #998 from mattymo/fix_upgrade_daemonsets
Fix upgrade for all daemonset type resources
7 years ago
Greg Althaus
3f0c13af8a
Make kubelet_load_modules always present but false.
Update code and docs for that assumption.
7 years ago
Greg Althaus
fcd78eb1f7
Due to the nsenter and other reworks, it appears that
kubelet lost the ability to load kernel modules. This
puts that back by adding the lib/modules mount to kubelet.
The new variable kubelet_load_modules can be set to true
to enable this item. It is OFF by default.
7 years ago
Matthew Mosesohn
17dfae6d4e
Merge pull request #999 from holser/decrease_weave_ram_limits
Lower weave RAM settings.
7 years ago
Mark Lee
e414c25fd7
follow sysctl.conf file symlink if linked
7 years ago
Mark Lee
34a71554ae
use ansible sysctl module for config ip forwarding
7 years ago
Bogdan Dobrelya
3b1a196c75
Merge pull request #902 from insequent/master
Adding vault role
7 years ago
Bogdan Dobrelya
105dbf471e
Merge pull request #993 from code0x9/master
enable proxy support on docker repository
7 years ago
David Crook
d4d9f27a8d
removed explicit role for efk in cluster.yml
7 years ago
Antoine Legrand
68df0d4909
Merge pull request #986 from vwfs/dnsmasq_system_nameservers
Also add the system nameservers to upstream servers in dnsmasq
7 years ago
Antoine Legrand
9c572fe54b
Merge pull request #984 from rutsky/patch-2
fix typo: "explicetely"
7 years ago
Josh Conant
245e05ce61
Vault security hardening and role isolation
7 years ago
Josh Conant
f4ec2d18e5
Adding the Vault role
8 years ago
Sergii Golovatiuk
4124d84c00
Lower weave RAM settings.
- Since Weave 1.8.x was rewritten in Golang we may decrease RAM settings
to continue using g1-small for CI
7 years ago
Matthew Mosesohn
3c713a3f53
Fix upgrade for all daemonset type resources
Daemonsets cannot be simply upgraded through a single API call,
regardless of any kubectl documentation. The resource must be
purged and then recreated in order to make any changes.
7 years ago
Alexander Block
89e570493a
Also add the system nameservers to upstream servers in dnsmasq
Also make no-resolv unconditional again. Otherwise, we may end up in
a resolver loop. The resolver loop was the cause for the piling up
parallel queries.
7 years ago
Matthew Mosesohn
16674774c7
Merge pull request #994 from mattymo/docker_save
Change docker save compress level to 1
7 years ago
Matthew Mosesohn
0180ad7f38
Merge pull request #990 from mattymo/fix_cert_upgrade
Fix check for node-NODEID certs existence
7 years ago
Matthew Mosesohn
bfd1ea1da1
Merge pull request #971 from bradbeam/efk
Adding EFK logging stack
7 years ago
Mark Lee
3eacd0c871
Update rh_docker.repo.j2
7 years ago
Matthew Mosesohn
d587270293
Merge pull request #992 from vwfs/host_mount_dev
Host mount /dev for kubelet
7 years ago
Matthew Mosesohn
3eb13e83cf
Change docker save compress level to 1
Faster gzip improves CI deploy times by at least 2 mins.
Fixes #982
7 years ago
Mark Lee
df761713aa
Merge branch 'master' of https://github.com/kubespray/kargo
7 years ago
Mark Lee
de50f37fea
enable proxy support on docker repository
7 years ago
Matthew Mosesohn
bad6076905
Merge pull request #987 from mattymo/etcd-retune
Re-tune ETCD performance params
7 years ago
Bogdan Dobrelya
c2bd76a22e
Merge pull request #956 from adidenko/update-netchecker
Update playbooks to support new netchecker
7 years ago
Alexander Block
010fe30b53
Host mount /dev for kubelet
7 years ago
Matthew Mosesohn
e5779ab786
Fix check for node-NODEID certs existence
Fixes upgrade from pre-individual node cert envs.
7 years ago
Matthew Mosesohn
71e14a13b4
Re-tune ETCD performance params
Reduce election timeout to 5000ms (was 10000ms)
Raise heartbeat interval to 250ms (was 100ms)
Remove etcd cpu share (was 300)
Make etcd_cpu_limit and etcd_memory_limit optional.
7 years ago